CWE-89 · SQL Injection (page 82)
Page 82 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-10613 | Medium | 6.3 | 2024-11-01 | A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delSystemEncryptPolicy of the fil… |
CVE-2024-10612 | Medium | 6.3 | 2024-11-01 | A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function removeHookInvalidCourse of the file /com/esafenet/ser… |
CVE-2024-10611 | Medium | 6.3 | 2024-11-01 | A vulnerability was found in ESAFENET CDG 5 and classified as critical. This issue affects the function delProtocol of the file /com/esafenet/servlet/system/Pr… |
CVE-2024-10610 | Medium | 6.3 | 2024-11-01 | A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function delProtocol of the file /com/esafenet/serv… |
CVE-2024-10609 | Medium | 6.3 | 2024-11-01 | A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System Project 1.0. This affects an unknown part of the file… |
CVE-2024-10608 | High | 7.3 | 2024-11-01 | A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2024-10607 | High | 7.3 | 2024-11-01 | A vulnerability was found in code-projects Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2024-10602 | Medium | 6.3 | 2024-11-01 | A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file /general/ap… |
CVE-2024-10601 | Medium | 6.3 | 2024-10-31 | A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2024-10600 | High | 7.3 | 2024-10-31 | A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.6. Affected is an unknown function of the file pda/appcenter/submenu.ph… |
CVE-2024-6480 | Medium | 6.4 | 2024-10-31 | The SIP Reviews Shortcode for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'no_of_reviews' attribute in the woocommerc… |
CVE-2024-6479 | Medium | 6.5 | 2024-10-31 | The SIP Reviews Shortcode for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'no_of_reviews' attribute in the woocommerce_reviews shor… |
CVE-2024-10597 | Medium | 6.3 | 2024-10-31 | A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function delPolicyAction of the file /com/esafenet/servlet/system/Pol… |
CVE-2024-10596 | Medium | 6.3 | 2024-10-31 | A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function delEntryptPolicySort of the file /com/esafen… |
CVE-2024-10595 | Medium | 6.3 | 2024-10-31 | A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of th… |
CVE-2024-10594 | Medium | 6.3 | 2024-10-31 | A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function docHistory of the file /com/esafenet/servlet/fileMana… |
CVE-2024-51065 | Critical | 9.8 | 2024-10-31 | Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter. |
CVE-2024-51064 | Critical | 9.8 | 2024-10-31 | Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection via the tid parameter to admin/queries.php. |
CVE-2024-51063 | Critical | 9.1 | 2024-10-31 | Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter. |
CVE-2024-51060 | Critical | 9.1 | 2024-10-31 | Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'a_id' parameter. |
CVE-2024-50802 | Medium | 6.0 | 2024-10-31 | A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_grid/email_template… |
CVE-2024-50801 | Medium | 6.0 | 2024-10-31 | A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_grid/collections.ph… |
CVE-2024-51482 | Critical | 9.9 | 2024-10-31 | ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37.* <= 1.37.64 is vulnerable to boolean-based SQL Injection in… |
CVE-2024-10561 | High | 7.3 | 2024-10-31 | A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file birdsupdate… |
CVE-2024-48307 | Critical | 9.8 | 2024-10-31 | JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData. |
CVE-2024-10556 | High | 7.3 | 2024-10-31 | A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an unknown function of the file birdsadd.p… |
CVE-2024-48733 | High | 8.8 | 2024-10-30 | SQL injection vulnerability in /SASStudio/sasexec/sessions/{sessionID}/sql in SAS Studio 9.4 allows remote attacker to execute arbitrary SQL commands via the P… |
CVE-2024-10546 | Medium | 6.3 | 2024-10-30 | A vulnerability classified as critical was found in open-scratch Teaching 在线教学平台 up to 2.7. This vulnerability affects unknown code of the file /api/sys/ng-ala… |
CVE-2024-46531 | Medium | 6.3 | 2024-10-30 | phpgurukul Vehicle Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchinputdata parameter at /index.php. |
CVE-2024-10509 | High | 7.3 | 2024-10-30 | A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processin… |
CVE-2024-10507 | High | 7.3 | 2024-10-30 | A vulnerability classified as critical was found in Codezips Free Exam Hall Seating Management System 1.0. This vulnerability affects unknown code of the file… |
CVE-2024-10506 | Medium | 6.3 | 2024-10-30 | A vulnerability classified as critical has been found in code-projects Blood Bank System 1.0. This affects an unknown part of the file /admin/blood/update/B-.p… |
CVE-2024-10502 | Medium | 6.3 | 2024-10-30 | A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function getOneFileDirectory of the file /com/esafe… |
CVE-2024-10501 | Medium | 6.3 | 2024-10-30 | A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function findById of the file /com/esafenet/servlet/document/E… |
CVE-2024-10500 | Medium | 6.3 | 2024-10-30 | A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is some unknown functionality of the file /com/esaf… |
CVE-2024-48573 | Critical | 9.8 | 2024-10-29 | A NoSQL injection vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to reset user and administrator account passwords via the "Res… |
CVE-2024-8924 | High | 7.5 | 2024-10-29 | ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user t… |
CVE-2024-8309 | Critical | 9.8 | 2024-10-29 | A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability c… |
CVE-2024-7042 | Critical | 9.8 | 2024-10-29 | A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leadin… |
CVE-2017-20195 | Medium | 5.5 | 2024-10-29 | A vulnerability was found in LUNAD3v AreaLoad up to 1a1103182ed63a06dde63d1712f3262eda19c3ec. It has been rated as critical. This issue affects some unknown pr… |
CVE-2024-48356 | Critical | 9.8 | 2024-10-28 | LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php. |
CVE-2024-48177 | High | 8.8 | 2024-10-28 | MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do. |
CVE-2024-48465 | Critical | 9.8 | 2024-10-28 | The MRBS version 1.5.0 has an SQL injection vulnerability in the edit_entry_handler.php file, specifically in the rooms%5B%5D parameter |
CVE-2024-48357 | Critical | 9.8 | 2024-10-28 | LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php. |
CVE-2024-10450 | Medium | 6.3 | 2024-10-28 | A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. This vulnerability affects unkno… |
CVE-2024-10449 | High | 7.3 | 2024-10-28 | A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction… |
CVE-2024-50491 | Critical | 9.3 | 2024-10-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue… |
CVE-2024-50479 | Critical | 9.3 | 2024-10-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in chenyenming Woocommerce Quote Calculator woo-quote-calcul… |
CVE-2024-50465 | High | 8.5 | 2024-10-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP SEO – Calin Vingan Premium SEO Pack allows SQL Injecti… |
CVE-2024-10447 | Medium | 6.3 | 2024-10-28 | A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. Affected by this vulnerability is an unknown functionality… |
CVE-2024-10446 | Medium | 6.3 | 2024-10-28 | A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. Affected is an unknown function of the file /timetable… |
CVE-2024-10440 | Critical | 9.8 | 2024-10-28 | The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL command to read, modify, and del… |
CVE-2024-23843 | Low | 2.2 | 2024-10-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Genians Genian NAC V5.0, Genians Genian NAC LTS V5.0.This… |
CVE-2024-10432 | High | 7.3 | 2024-10-28 | A vulnerability has been found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2024-10431 | High | 7.3 | 2024-10-27 | A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an unknown function of the file /deletebir… |
CVE-2024-10430 | High | 7.3 | 2024-10-27 | A vulnerability, which was classified as critical, has been found in Codezips Pet Shop Management System 1.0. This issue affects some unknown processing of the… |
CVE-2024-10427 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /de… |
CVE-2024-10426 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file /animalsadd… |
CVE-2024-10425 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in Project Worlds Student Project Allocation System 1.0 and classified as critical. Affected by this issue is some unknown functional… |
CVE-2024-10424 | Medium | 6.3 | 2024-10-27 | A vulnerability has been found in Project Worlds Student Project Allocation System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2024-10423 | Medium | 6.3 | 2024-10-27 | A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0. Affected is an unknown function of the fi… |
CVE-2024-10422 | Medium | 6.3 | 2024-10-27 | A vulnerability, which was classified as critical, has been found in SourceCodester Attendance and Payroll System 1.0. This issue affects some unknown processi… |
CVE-2024-10421 | Medium | 6.3 | 2024-10-27 | A vulnerability classified as critical was found in SourceCodester Attendance and Payroll System 1.0. This vulnerability affects unknown code of the file /admi… |
CVE-2024-10418 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown fun… |
CVE-2024-10417 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /f… |
CVE-2024-10416 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in code-projects Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processing of the file… |
CVE-2024-10415 | Medium | 6.3 | 2024-10-27 | A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as critical. This vulnerability affects unknown code of the fil… |
CVE-2024-10411 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in SourceCodester Online Hotel Reservation System 1.0. It has been classified as critical. Affected is the function doCancelRoom/doCa… |
CVE-2024-10409 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in code-projects Blood Bank Management 1.0 and classified as critical. This issue affects some unknown processing of the file /file/a… |
CVE-2024-10408 | Medium | 6.3 | 2024-10-27 | A vulnerability has been found in code-projects Blood Bank Management up to 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2024-10407 | Medium | 6.3 | 2024-10-27 | A vulnerability, which was classified as critical, was found in SourceCodester Petrol Pump Management Software 1.0. This affects an unknown part of the file /a… |
CVE-2024-10406 | Medium | 6.3 | 2024-10-26 | A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown… |
CVE-2024-9475 | Medium | 4.9 | 2024-10-26 | The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the order_by parameter in all versi… |
CVE-2024-48238 | Medium | 4.7 | 2024-10-25 | WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter. |
CVE-2024-48230 | High | 7.2 | 2024-10-25 | funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php. |
CVE-2024-48229 | High | 7.2 | 2024-10-25 | funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin. |
CVE-2024-48226 | High | 7.2 | 2024-10-25 | Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield. |
CVE-2024-48223 | High | 7.2 | 2024-10-25 | Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist. |
CVE-2024-48222 | High | 7.2 | 2024-10-25 | Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit. |
CVE-2024-48218 | High | 7.2 | 2024-10-25 | Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list. |
CVE-2024-48343 | Medium | 6.3 | 2024-10-25 | A SQL Injection vulnerability in ESAFENET CDG 5 and earlier allows an attacker to execute arbitrary code via the id parameter of the dataSearch.jsp page. |
CVE-2024-48580 | Critical | 9.8 | 2024-10-25 | SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the lo… |
CVE-2024-10380 | Medium | 6.3 | 2024-10-25 | A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown… |
CVE-2024-10378 | Medium | 6.3 | 2024-10-25 | A vulnerability classified as critical has been found in ESAFENET CDG 5. Affected is the function actionViewCDGRenewFile of the file /com/esafenet/servlet/clie… |
CVE-2024-47483 | Low | 2.9 | 2024-10-25 | Dell Data Lakehouse, version(s) 1.0.0.0 and 1.1.0.0, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnera… |
CVE-2024-10377 | Medium | 6.3 | 2024-10-25 | A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. This issue affects the function actionPassDecryptApplication1 of the file /com/esaf… |
CVE-2024-10376 | Medium | 6.3 | 2024-10-25 | A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects the function actionPassOrNotAutoSign of the file /com… |
CVE-2024-10341 | Medium | 6.5 | 2024-10-25 | The League of Legends Shortcodes plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 1.0.1 due to… |
CVE-2024-10370 | High | 7.3 | 2024-10-25 | A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2024-10369 | High | 7.3 | 2024-10-25 | A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2024-10368 | High | 7.3 | 2024-10-25 | A vulnerability was found in Codezips Sales Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /addstock.ph… |
CVE-2024-10355 | Medium | 4.7 | 2024-10-25 | A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown… |
CVE-2024-10354 | Medium | 4.7 | 2024-10-25 | A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. Affected by this vulnerability is an unknown functional… |
CVE-2024-10350 | Medium | 4.7 | 2024-10-24 | A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the fil… |
CVE-2024-41618 | Critical | 9.8 | 2024-10-24 | Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to SQL Injection in the `transaction_delete_group` function. The vulnerability is due to imp… |
CVE-2024-10349 | Medium | 6.3 | 2024-10-24 | A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Affected by this issue is the function delete_t… |
CVE-2024-47881 | High | 8.1 | 2024-10-24 | OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.8.3, in the `database` extension, the "… |
CVE-2024-48427 | High | 8.8 | 2024-10-24 | A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbitrary SQL commands v… |
CVE-2024-10338 | Medium | 4.7 | 2024-10-24 | A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an unknown functionalit… |
CVE-2024-10337 | Medium | 4.7 | 2024-10-24 | A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is an unknown function of the file /admin/h… |